Schneider Electric Wonderware Information Server Portal vulnerabilities
5 vulnerabilities
Known vulnerabilities in Schneider Electric Wonderware Information Server Portal, newest first, with CVSS severity, EPSS, KEV listings, ransomware use and the affected versions.
CVE-2014-2381invensyswonderware_information_server+1
EPSS score0.14%
Schneider Electric Wonderware Information Server (WIS) Portal 4.0 SP1 through 5.5 uses weak encryption, which allows local users to obtain sensitive information by reading a credential file.CVE-2014-2380invensyswonderware_information_server+1EPSS score0.75%
Schneider Electric Wonderware Information Server (WIS) Portal 4.0 SP1 through 5.5 uses weak encryption, which allows remote attackers to obtain sensitive information by reading a credential file.CVE-2014-5397invensyswonderware_information_server+1EPSS score1.51%
Cross-site scripting (XSS) vulnerability in Schneider Electric Wonderware Information Server (WIS) Portal 4.0 SP1 through 5.5 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors.CVE-2014-5398invensyswonderware_information_server+1EPSS score0.56%
Schneider Electric Wonderware Information Server (WIS) Portal 4.0 SP1 through 5.5 allows remote attackers to read arbitrary files or cause a denial of service via an XML external entity declaration in conjunction with an entity reference, related to an XML External Entity (XXE) issue.CVE-2014-5399invensyswonderware_information_server+1EPSS score1.59%
SQL injection vulnerability in Schneider Electric Wonderware Information Server (WIS) Portal 4.0 SP1 through 5.5 allows remote attackers to execute arbitrary SQL commands via unspecified vectors.